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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

Claims 1-8 (Cancelled) 

9. (Previously presented) A device for communicating with other devices to allow 
them to access applications, comprising: 
at least a first application; 

authentication means for authenticating a communicating device; 

access control means accessible by a communicating device requesting access to 
the first application without the communicating device having been authenticated by the 
authentication means, and arranged to arbitrate whether access of the communicating 
device to the first application is granted or refused wherein if the arbitration requires an 
authentication of the communicating device, the access control means instructs the 
authentication means to authenticate the communicating device, wherein the access 
control means receives indications originating from the communicating device 
identifying the communicating device and the application requested. 

Claims 10-26 (Cancelled). 

27. (Previously presented) A device for communicating with other devices to allow 
them to access applications, comprising: 

at least first and second applications; 

authentication means for authenticating a communicating device; 

first access control means accessible by a communicating device requesting 
access to the first application without the communicating device having been 
authenticated by the authentication means, and arranged to arbitrate whether access of the 
communicating device to the first application is granted or refused wherein if the 
arbitration requires an authentication of the communicating device, the access control 
means instructs the authentication means to authenticate the communicating device; 

second access control means accessible by a communicating device requesting 
access to the second application without the communicating device having been 
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authenticated by the authentication means, and arranged to arbitrate whether access of the 
communicating device to the second application is granted or refused wherein if the 
arbitration requires an authentication of the communicating device, the second access 
control means instructs the authentication means to authenticate the communicating 
device, wherein the first access control means is accessible by a communicating device 
requesting access to the second application without the communicating device having 
been authenticated by the authentication means, and is arranged to provide the access of 
the communicating device to the second access control means. 

Claim 28 (Cancelled). 

29. (Previously presented) A method of arbitrating the access of a requesting device 
to a service provided by a providing device comprising: 

sending a request to access the service from the requesting device to the providing 

device; 

receiving the request at the providing device and passing it, without authenticating 
the requesting device, to an arbitration means interfacing the service; 

determining, in the arbitration means, whether to grant or refuse access to the first 
application by the requesting device, wherein if the determination requires an 
authentication of the requesting device, the authentication is performed during that 
determination and not previously, wherein the determination is made on the basis of the 
identity of service requested and/or the identity of the requesting device. 

Claims 30-32 (Cancelled). 

33. (New) A device as claimed in claim 9 wherein the access control means is 
arranged to store security indications in association with accessible applications, wherein the 
stored security indication associated with the first application is indicative of whether 
authentication of the communicating device is or is not required during arbitration. 

34. (New) A device as claimed in claim 33 wherein the stored security indication 
associated with the first application is indicative of whether authentication of the communicating 
device is or is not required during arbitration, in independence of the identity of the 
communicating device. 
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35. (New) A device as claimed in claim 9 further comprising a user interface for 
authorizing access to an application during arbitration, the access control means being arranged 
to store security indications in association with accessible applications, wherein the stored 
security indication associated with the first application is indicative of whether user authorization 
of the communicating device is or is not required during arbitration. 

36. (New) A device as claimed in claim 35 wherein the access control means is 
further arranged to store trust indications in association with devices, and wherein the stored 
security indication associated with the first application is indicative of whether user authorization 
of the communicating device is or is not required during arbitration in dependence upon any 
stored trust indication associated with the communicating device. 

37. (New) A device as claimed in claim 9 wherein authentication comprises secret 
key exchange between the device and the communicating device. 

38. (New) A method as claimed in claim 29 comprising storing security indications 
in association with accessible applications, wherein the stored security indication associated with 
the first application is indicative of whether authentication of the requesting device is or is not 
required during arbitration. 

39. (New) A method as claimed in claim 38 wherein the stored security indication 
associated with the first application is indicative of whether authentication of the requesting 
device is or is not required during arbitration, in independence of the identity of the requesting 
device. 

40. (New) A method as claimed in claim 29 further comprising authorizing access to 
an application during arbitration via a user interface, and storing security indications in 
association with accessible applications, wherein the stored security indication associated with 
the first application is indicative of whether user authorization of the communicating device is or 
is not required during arbitration. 

41. (New) A method as claimed in claim 40 comprising storing trust indications in 
association with devices, and wherein the stored security indication associated with the first 
application is indicative of whether user authorization of the requesting device is or is not 
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required during arbitration in dependence upon any stored trust indication associated with the 
requesting device. 

42. (New) A method as claimed in claim 29 wherein authentication comprises secret 
key exchange between the providing device and the requesting device. 
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